feat(aa-log): new structure for apparmor rules.

This commit is contained in:
Alexandre Pujol 2023-09-25 00:06:07 +01:00
parent 99d1a4e302
commit 923bb66eba
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 428 additions and 192 deletions

33
pkg/aa/unix.go Normal file
View file

@ -0,0 +1,33 @@
// apparmor.d - Full set of apparmor profiles
// Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
// SPDX-License-Identifier: GPL-2.0-only
package aa
type Unix struct {
Qualifier
Access string
Type string
Protocol string
Address string
Label string
Attr string
Opt string
Peer string
PeerAddr string
}
func UnixFromLog(log map[string]string, noNewPrivs, fileInherit bool) ApparmorRule {
return &Unix{
Qualifier: NewQualifier(false, noNewPrivs, fileInherit),
Access: maskToAccess[log["requested_mask"]],
Type: log["sock_type"],
Protocol: log["protocol"],
Address: log["addr"],
Label: log["peer_label"],
Attr: log["attr"],
Opt: log["opt"],
Peer: log["peer"],
PeerAddr: log["peer_addr"],
}
}